AMENDMENTS TO THE CLAIMS 



This listing of claims will replace all prior versions, and listings, of claims 
in the application: 

Listing of Claims; 

1 . (Currently amended) A method for to facilitate sccuro 
m e ssagin g enabling a database system to prove that an origin system sent a 
message, comprising: 

cr e ating a messag e at on origin; 

computing a dig e st of th e m e ssag e ; 

signing the dig e st using an origin private encryption key; 

s e nding th e m e ssage and th e digest to a qu e ue locat e d in a third party 
d e vic e for deliv e ry to a r e cipi e nt; 

receiving the message and the -a signed first digest at th e qu e uc o f the 
message at a databetse system from the origin system, wherein the signed first 
digest was created by signing a digest of the message using an origin private 
encryption key : 

using an origin public encryption key that is associated with the origin 
private encryption kev to v erifying that the signed first d igest was signed at-bv the 
origin system, thereby proving that the origin system created and sent the 
message bv using an origin public encryption k e y, wher e by th e origin mnnnt Hnny 
cr e ating th e message : and 

persistently storing the signed first digest with the message, thereby 
enabling the database system to present the signed first digest as proof that the 
origin system sent the message. 

if th e digest is verified as b e ing sign e d at the origin, 
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22 placing th e m e ssag e and dig e st on the qu e u e and 

23 persist e ntly storing a record of this transaction, and 

24 notifying th e recipient that th e messag e is availabl e ; 

25 generating a request at the r e cipi e nt to rec e iv e th e m e ssag e from th e qu e ue 

26 locat e d in th e third party device; 

27 cr e ating a signature for th e r e qu e st using a r e cipient privat e e ncryption 

28 key^ 

29 s e nding tli e r e qu e st and th e signatur e to th e queu e ; 

30 validating th e request at th e queu e using the signature and a r e cipi e nt 

31 public e ncryption k e y; and 

32 if th e r e qu e st is valid^ 

33 d e qu e u e ing the m e ssage from the qu e ue, 

34 sending the digest to the recipient; 

35 signing the dig e st at the r e cipi e nt using the recipi e nt private 

36 encryption key creating a signed dig e st; 

37 r e turning th e sign e d digest to th e qu e ue, 

38 validating the signed digest at th e qu e u e using th e recipi e nt 

39 public encr>T)tion k e y, v/h e reby the recipi e nt cannot deny 

40 r e questing to r e c e iv e th e message, and 

41 if the sign e d dig e st is valid, persist e ntly storing a r e cord of 

42 this transaction and sending th e m e ssag e to the r e cipient. 

1 2. (Canceled). 

1 I 3. (Currently amended) The method o f claim 22 claim 1 , further 

2 comprising passing the message and the digest through a plurality of queues 

3 between the origin and the recipient, whereby the recipient and the origin are 

4 subscribers of different queues. ' 
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1 4. (Original) The method of claim 3, further comprising passing the 

2 message and the digest through a plurality of databases, wherein each database in 

3 the plurality of databases includes at least one queue of the plurality of queues. 

1 5. (Previously presented) The method of claim 1 , wherein the origin public 

2 encryption key and the origin private encryption key are a key pair of a public key 

3 encryption system. 

1 I 6. (Currently amended) The method o f claim 22 claim 1 , wherein the 

2 recipient public encryption key and the recipient private encryption key are a key 

3 pair of a public key encryption system. 

1 7. (Previously presented) The method of claim 1, wherein computing the 

2 digest includes using one of message digest 2 (MD2), message digest 4 (MD4), 

3 message digest 5 (MD5), secure hash algorithm (SHA), and secure hash algorithm 

4 1 (SHAl). 

1 8. (Currently amended) A computer-readable storage medium storing 

2 instructions that when executed by a computer cause the computer to perform a 

3 method to facilitate s e cur e m e ssaging for enabling a database system to prove that 

4 an origin system sent a message, the method comprising: 

5 creating a m e ssag e at an origin; 

6 computing a dig e st of the message; 

7 signing th e dig e st using an origin privat e e ncryption k e y; 

8 sending the message and the digest to a queu e locat e d in a third party 

9 device for d e livery to a r e cipi e nt; 

10 receiving the message and ^ie -a signed first digest at the qu e u e of the 

11 message at a database system from the origin system, wherein the signed first 
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12 digest was created bv signing a digest of the message using an origin private 

13 encryption key ; 

14 using an origin public encryption key that is associated with the origin 

1 5 private encryption key to v erifying that the signed first d igest was signed a^by the 

1 6 origin system, thereby proving that the origin system created and sent the 

17 message b v using an origin public e ncryption k e y, wher e by th e origin cannot d e ny 

18 creating the m e ssag e; and 

19 persistently storing the signed first digest with the message, thereby 

20 enabling the database system to present the signed first digest as proof that the 

21 origin system sent the message. 

22 if th e dig e st is v e rifi e d as b e ing sign e d at th e origin, 

23 placing the m e ssage and digest on the queue and 

24 persistently storing a r e cord of this transaction, and 

25 notifying the r e cipient that th e m e ssage is availabl e ; 

26 g e n e rating a r e quest at th e r e cipi e nt to rec e iv e th e m e ssag e 

27 from th e queu e locat e d in th e third party devic e ; 

28 cr e ating a signatur e for th e r e qu e st using a r e cipi e nt privat e 

29 encryption k e y; 

30 s e nding th e r e qu e st and th e signatur e to th e qu e u e ; 

31 validating th e r e qu e st at th e queu e using th e signature and a 

32 r e cipi e nt public e ncryption k e y; and 

33 if the r e qu e st is valid, 

34 dequ e u e ing th e m e ssag e fi-om th e qu e u e , 

35 s e nding th e dig e st to th e r e cipi e nt, 

36 signing the digest at the r e cipient using the recipient private 

37 e ncryption k e y cr e ating a signed dig e st, 

38 returning the signed dig e st to th e qu e u e , 
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validating th e s ign e d digest at th e queu e using the recipi e nt 
publio 0ncr>T)tion key, wh e reby tho recipi e nt cannot d e ny 
r e questing to r e ceiv e th e m e ssag e , and 
if th e sign e d digest is valid, p e rsist e ntly storing a record of this transaction 
and s e nding th e m e ssage to the r e cipient. 

9. (Canceled). 

10. (Currently amended) The computer-readable storage medium o f claim 
23 claim 8, the method further comprising passing the message and the digest 
through a plurality of queues between the origin and the recipient, whereby the 
recipient and the origin are subscribers of different queues. 

11. (Original) The computer-readable storage medium of claim 10, the 
method further comprising passing the message and the digest through a plurality 
of databases, wherein each database in the plurality of databases includes at least 
one queue of the plurality of queues. 

12. (Previously presented) The computer-readable storage medium of 
claim 8, wherein the origin public encryption key and the origin private encryption 
key are a key pair of a public key encryption system. 

13. (Currently amended) The computer-readable storage medium o f claim 
23 claim 8 , wherein the recipient public encryption key and the recipient private 
encryption key are a key pair of a public key encryption system. 

14. (Previously presented) The computer-readable storage medium of 
claim 8, wherein computing the digest includes using one of message digest 2 
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(MD2), message digest 4 (MD4), message digest 5 (MD5), secure hash algorithm 
(SHA), and secure hash algorithm 1 (SHAl). 

15. (Currently amended) An apparatus fo rto facilitate ocourc m e ssaging 
enabling a database system to prove that an origin system sent a message , 
comprising: 

a first creating mechanism that is configured to create a mossago at an 

origin; 

a computing m e chanism that is configur e d to compute a digest of the 
m e ssag e ; 

a first signing mechanism that is configur e d to sign the dig e st using on 
origin privat e encryption key; 

a first sending mechanism that is configur e d to s e nd the message and the 
dig e st to a qu e ue locat e d in a third party d e vic e for d e liver}^ to a recipient; 

a firsLreceiving mechanism that is configured to receive the message and 
fee -a signed first digest at th e quouo of the message at a database system fi-om the 
origin system, wherein the signed first digest was created by signing a digest of 
the message using an origin private encryption key : 

a first verifying mechanism that is configured to use an origin public 
encryption key that is associated with the origin private encryption key to verify 
that the signed first digest was signed at-by the origin system, thereby proving that 
the origin system created and sent the message b v using on origin puhlic 
e ncryption k e y, wher e by th e origin cannot d e ny creating th e m e ssage : and 

a first storingp laeing mechanism that is configured to pteee-persistently 
store the signed first digest with the message, thereby enabling the database 
system to present the signed first digest as proof that the origin system sent the 
message, t h e m e ssage and digest on tho guou e nnd porniRt a ntly ntnrft n r ^ mrd of 
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25 this transaction; a notifying m e chanism that is configur e d to notifi^ tho rocipiont 

26 that th e m e ssage is availabl e ; 

27 a generating m e chanism that is configured to g e n e rat e a r e qu e st at tho 

28 recipi e nt to r e ceive the m e ssag e from th e qu e u e locat e d in th e third party device; 

29 a s e cond cr e ating m e chanism that is configured to cr e at e a signatur e for 

30 th e r e qu e st u s ing a r e cipi e nt privat e e ncryption k e y; 

31 a s e cond s e nding m e chanism that is configur e d to s e nd th e r e qu e st and the 

32 signatur e to th e qu e u e ; 

33 a first validating m e chanism that is configur e d to validate the request at 

34 the qu e u e using th e signatur e and a recipi e nt public e ncryption key; 

35 a d e queueing m e chanism that is configur e d to d e qu e u e th e m e ssage from 

36 th e qu e u e ; 

37 a third s e nding m e chanism that is configured to s e nd the digest to th e 

38 r e cipi e nt; 

39 a s e cond signing m e chanism that is configur e d to sign th e digest at the 

40 r e cipient using th e r e cipi e nt privat e e ncryption k e y cr e ating a sign e d dig e st; 

41 a r e turning m e chanism that is configured to r e tum th e sign e d digest to tho 

42 qu e u e ; 

43 a second validating m e chanism that is configur e d to validate th e signed 

44 dig e st at th e queu e using th e r e cipient public encr>ytion k e y and persistently store 

45 a r e cord of this transaction, wh e r e by th e r e cipi e nt cannot d e ny r e questing to 

46 r e c e iv e th e m e ssag e ; and 

47 wh e rein th e third s e nding m e chanism is fiirth e r configur e d to send tho 

48 m e ssage to th e recipi e nt. 

1 16. (Canceled). 
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1 17. (Currently amended) The apparatus o f claim 24 claim 15 , further 

2 comprising a passing mechanism that is configured to pass the message and the 

3 digest through a plurality of queues between the origin and the recipient, whereby 

4 the recipient and the origin are subscribers of different queues. 

1 18. (Original) The apparatus of claim 1 7, wherein the passing mechanism 

2 is further configured to pass the message and the digest through a plurality of 

3 databases, wherein each database in the pluraUty of databases includes at least one 

4 queue of the plurality of queues. 

1 19. (Previously presented) The apparatus of claim 15, wherein the origin 

2 public encryption key and the origin private encryption key are a key pair of a 

3 public key encryption system. 

1 20. (Currently amended) The apparatus o f claim 2 1 claim 15 , wherein the 

2 recipient public encryption key and the recipient private encryption key are a key 

3 pair of a public key encryption system. 

1 21. (Previously presented) The apparatus of claim 15, wherein computing 

2 the digest includes using one of message digest 2 (MD2), message digest 4 

3 (MD4), message digest 5 (MD5), secure hash algorithm (SHA), and secure hash 

4 algorithm 1 (SHAl). 

1 22. (New) The method of claim 1 , fiirther comprising: 

2 receiving a signed receive-request from a recipient system for receiving 

3 the message, wherein the receive-request is signed using a recipient private 

4 encryption key; 
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5 validating the signed receive-request using a recipient public encryption 

6 key that is associated with the recipient private encryption key; 

7 sending a second digest of the message to the recipient system; 

8 receiving a signed second digest from the recipient system, wherein the 

9 signed second digest was created by signing the second digest using the recipient 

1 0 private encryption key; 

1 1 validating the signed second digest using the recipient public encryption 

12 key, thereby proving that the recipient system requested to receive the message; 

13 and 

14 persistently storing the signed second digest, thereby enabling the database 

1 5 system to present the signed second digest as proof that the recipient system 

1 6 requested to receive the message. 

1 23. (New) The computer-readable storage medium of claim 8, the method 

2 further comprising: 

3 receiving a signed receive-request from a recipient system for receiving 

4 the message, wherein the receive-request is signed using a recipient private 

5 encryption key; 

6 validating the signed receive-request using a recipient public encryption 

7 key that is associated with the recipient private encryption key; 

8 sending a second digest of the message to the recipient system; 

9 receiving a signed second digest from the recipient system, wherein the 

10 signed second digest was created by signing the second digest using the recipient 

1 1 private encryption key; 

12 validating the signed second digest using the recipient public encryption 

1 3 key, thereby proving that the recipient system requested to receive the message; 

14 and 
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1 5 persistently storing the signed second digest, thereby enabling the database 

16 system to present the signed second digest as proof that the recipient system 

17 requested to receive the message. 

1 24. (New) The apparatus of claim 15, further comprising: 

2 a second receiving mechanism configured to receive a signed 

3 receive-request from a recipient system for receiving the message, wherein the 

4 receive-request is signed using a recipient private encryption key; 

5 a second validating mechanism configured to validate the signed 

6 receive-request using a recipient public encryption key that is associated with the 

7 recipient private encryption key; 

8 a second sending mechanism configured to send a second digest of the 

9 message to the recipient system; 

10 a third receiving mechanism configured to receive a signed second digest 

1 1 firom the recipient system, wherein the signed second digest was created by 

12 signing the second digest using the recipient private encryption key; 

13 a third validating mechanism configured to validate the signed second 

14 digest using the recipient public encryption key, thereby proving that the recipient 

1 5 system requested to receive the message; and 

16 a second storing mechanism configured to persistently store the signed 

1 7 second digest, thereby enabling the database system to present the signed second 

1 8 digest as proof that the recipient system requested to receive the message. 



11 

LS W:\0racle Corporation\OR0I\OR01-07401\Amendnient B OR01-07401.doc 



